| शीर्षक | wtcms cms 1.0 SQL Injection |
|---|
| विवरण | A critical SQL Injection vulnerability has been identified in the delete() function within the CommentadminController class of the affected application. The vulnerability arises due to improper neutralization of special elements used in an SQL command (ids parameter). The code directly concatenates user-supplied input from the $_POST['ids'] array into an SQL query without using parameterized queries or proper sanitization, allowing an attacker to execute arbitrary SQL commands on the underlying database. |
|---|
| स्रोत | ⚠️ https://www.yuque.com/shangu-vvuup/ydpg69/mlybdhd2gevo0phu?singleDoc# 《SQL Injection Vulnerability in WTCMS 1.0》 |
|---|
| उपयोगकर्ता | sT1TcH (UID 91291) |
|---|
| सबमिशन | 04/11/2025 02:25 PM (11 महीनों पहले) |
|---|
| संयम | 29/11/2025 01:55 PM (25 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 333787 [taosir WTCMS तक 01a5f68a3dfc2fdddb44eed967bb2d4f60487665 CommentadminController CommentadminController.class.php check/uncheck/delete ids SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|